IPIP tunnel behind NAT

[Baldur Gislason]

You need to do do a one-to-one NAT, so protocol 94 (IPIP) packets get forwarded.
It's not TCP or UDP, so no ports there.
Alternatively, you can set up a NAT traversing IPSEC-in-UDP tunnel, but that requires a kernel patch.

Baldur

On Thu, Apr 24, 2008 at 08:11:34AM -0400, Steve Bertrand wrote:
> Baldur Gislason wrote:
> >It'll work fine. I've done this several times before.
> 
> Hmmm. I still can't seem to get this setup to work. The FreeBSD box is 
> in behind a Fortigate 200 unit.
> 
> >However I've also had NAT implementations which didn't work this way but
> >this one should definitely work.
> 
> Are there any ports that need to be opened on the Fortigate to allow the 
> tunnel traffic through? There appears to be no place in the Fortigate to 
> pass protocol 41 traffic.
> 
> Thanks,
> 
> Steve
> _______________________________________________
> freebsd-net at freebsd.org mailing list
> http://lists.freebsd.org/mailman/listinfo/freebsd-net
> To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
>